CVE-2020-14177

published 2020-09-21

CVE-2020-14177: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service…

Priority P3 35 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service (DoS) vulnerability in JQL version searching. The affected versions are before version 7.13.16; from version 7.14.0 before 8.5.7; from version 8.6.0 before 8.10.2; and from version 8.11.0 before 8.11.1.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
atlassian	jira_server	< 7.13.16	7.13.16
atlassian	jira_server	>= 7.14.0 < unspecified	unspecified
atlassian	jira_server	>= 7.14.0 < 8.5.7	8.5.7
atlassian	jira_server	>= 8.11.0 < unspecified	unspecified
atlassian	jira_server	>= 8.11.0 < 8.11.1	8.11.1
atlassian	jira_server	>= 8.6.0 < unspecified	unspecified
atlassian	jira_server	>= 8.6.0 < 8.10.2	8.10.2
atlassian	jira_server	>= unspecified < 7.13.6	7.13.6
atlassian	jira_server	>= unspecified < 8.5.7	8.5.7
atlassian	jira_server	>= unspecified < 8.10.2	8.10.2
atlassian	jira_server	>= unspecified < 8.11.1	8.11.1

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.